Alleva
Alleva is a behavioral health operations platform — an EMR/EHR, CRM, admissions, scheduling, clinical documentation, and revenue-cycle system purpose-built for substance use disorder and mental health treatment providers across the residential, PHP, IOP, and outpatient continuum. The platform covers client intake and prospect management, bed and facility census, treatment plans and reviews, discharge planning, medications and e-prescribe, group and individual sessions, shift rounds, incident reports, homework and surveys, and configurable advanced forms, with AI-assisted documentation (Echo ambient scribe, Alleva Intelligence) and a built-in GRC module (InCheck). A public ASP.NET REST API at api.helloalleva.com exposes 424 operations across 37 resource groups under JWT bearer authentication, with a publicly reachable Swagger UI and machine-readable OpenAPI 3.0.1 description. Alleva holds ONC Certification and SOC 2 Type II attestation and publishes a Vanta trust center and an Atlassian status page that tracks the REST API as a first-class component.
Real signal across most facets with visible, nameable gaps — the contract exists but is thin, or the portal is good while governance and commercial terms are absent.
API Evangelist profiles Alleva the way a machine reads it — 80 machine-readable artifacts across 37 APIs, pulled from the provider's own public surface and indexed so a developer, an analyst, or an AI agent can evaluate it against every other provider on the network.
Every provider in the network is reduced to the same set of machine-readable artifacts — OpenAPI contracts, event specifications, GraphQL schemas, runnable collections, pricing and rate-limit signals, security posture, OAuth scopes, and the agent surfaces (MCP servers and skills) that let software drive the API on its own. We profile them because the interface is the part of a company you can actually inspect: it is a truer signal of what a provider does than any marketing page. From those artifacts we compute the Kin Score — Alleva scores 42.1/100 (developing), with a separate agent-readiness read of 37/100 (agent ready). The full breakdown is below, followed by every artifact we hold — each card links through to its machine-readable definition on apis.io.
Kin Score
This is the API Evangelist rating — a single, repeatable read computed from the artifacts on this page. Green fill is points earned; the red track is points possible, so every bar shows earned-versus-possible at a glance.
Kin Score
How this is scored →scored 2026-08-17 · rubric v0.11.0
Put this on your own site. The badge is drawn live from Alleva's current Kin Score — paste it once and it updates itself every time the score is recomputed. It follows your visitor's light or dark setting, and it links back here so anyone who sees it can read the full breakdown.
<!-- Kin Score · API Evangelist -->
<a href="https://providers.apievangelist.com/providers/alleva/"
title="Alleva on API Evangelist — API profile and Kin Score">
<img src="https://apis.io/badge/alleva.svg"
alt="Alleva Kin Score — API readiness rating by API Evangelist" width="150" height="150" loading="lazy">
</a>[](https://providers.apievangelist.com/providers/alleva/)<!-- Kin Score · API Evangelist -->
<a href="https://providers.apievangelist.com/providers/alleva/"
title="Alleva on API Evangelist — API profile and Kin Score">
<img src="https://apis.io/badge/alleva/card.svg"
alt="Alleva Kin Score — API readiness rating by API Evangelist" width="340" height="120" loading="lazy">
</a>More shapes, themes and sizes → · Score as JSON · How badges work
How we profile Alleva
Each block below is one kind of artifact we hold for Alleva. For each we say what it is and why it earns a place in the profile, then list every one we've indexed — capped at two rows, scroll within the panel for the rest.
APIs 37
Each API is captured as its own OpenAPI definition — every operation, parameter, and response. This is the single most useful machine-readable description of what an API does, and it's what lets us score, lint, mock, and generate against it without asking the provider for anything.
Individual APIs this provider publishes, each with its own machine-readable definition.
Alleva Advanced Form API
The AdvancedForm API from Alleva — 8 operation(s) for advancedform.
Alleva Advanced Form Data Backup API
The AdvancedFormDataBackup API from Alleva — 2 operation(s) for advancedformdatabackup.
Alleva Advanced Form Element API
The AdvancedFormElement API from Alleva — 2 operation(s) for advancedformelement.
Alleva Advanced Form Instance API
The AdvancedFormInstance API from Alleva — 2 operation(s) for advancedforminstance.
Alleva Appointments API
The Appointments API from Alleva — 4 operation(s) for appointments.
Alleva Bed API
The Bed API from Alleva — 4 operation(s) for bed.
Alleva Bed Occupancy API
The BedOccupancy API from Alleva — 28 operation(s) for bedoccupancy.
Alleva Bed Reservation API
The BedReservation API from Alleva — 20 operation(s) for bedreservation.
Alleva Client Device API
The ClientDevice API from Alleva — 4 operation(s) for clientdevice.
Alleva Clients API
The Clients API from Alleva — 38 operation(s) for clients.
Alleva Data Facet API
The DataFacet API from Alleva — 2 operation(s) for datafacet.
Alleva Data Value API
The DataValue API from Alleva — 4 operation(s) for datavalue.
Alleva Discharge Plan API
The DischargePlan API from Alleva — 4 operation(s) for dischargeplan.
Alleva Document API
The Document API from Alleva — 6 operation(s) for document.
Alleva Facilities API
The Facilities API from Alleva — 8 operation(s) for facilities.
Alleva Homework API
The Homework API from Alleva — 8 operation(s) for homework.
Alleva Incident Report API
The IncidentReport API from Alleva — 4 operation(s) for incidentreport.
Alleva Intake API
The Intake API from Alleva — 8 operation(s) for intake.
Alleva Level Of Care API
The LevelOfCare API from Alleva — 4 operation(s) for levelofcare.
Alleva Manage Intake API
The ManageIntake API from Alleva — 12 operation(s) for manageintake.
Alleva Master Codes API
The MasterCodes API from Alleva — 2 operation(s) for mastercodes.
Alleva Medications API
The Medications API from Alleva — 4 operation(s) for medications.
Alleva Organizations API
The Organizations API from Alleva — 6 operation(s) for organizations.
Alleva Pronoun API
The Pronoun API from Alleva — 4 operation(s) for pronoun.
Alleva Prospects API
The Prospects API from Alleva — 12 operation(s) for prospects.
Alleva Referral Companies API
The ReferralCompanies API from Alleva — 14 operation(s) for referralcompanies.
Alleva Referral Contacts API
The ReferralContacts API from Alleva — 14 operation(s) for referralcontacts.
Alleva Rehab API
The Rehab API from Alleva — 8 operation(s) for rehab.
Alleva Room API
The Room API from Alleva — 4 operation(s) for room.
Alleva Sessions API
The Sessions API from Alleva — 1 operation(s) for sessions.
Alleva Shift Rounds API
The ShiftRounds API from Alleva — 6 operation(s) for shiftrounds.
Alleva Snapshot API
The Snapshot API from Alleva — 8 operation(s) for snapshot.
Alleva Survey API
The Survey API from Alleva — 6 operation(s) for survey.
Alleva Treatment Plans API
The TreatmentPlans API from Alleva — 10 operation(s) for treatmentplans.
Alleva Treatment Reviews API
The TreatmentReviews API from Alleva — 4 operation(s) for treatmentreviews.
Alleva User License API
The UserLicense API from Alleva — 4 operation(s) for userlicense.
Alleva Users API
The Users API from Alleva — 20 operation(s) for users.
Scroll within the panel for all 37 ·
Open Collections 38
Open, tool-agnostic collections carry the same runnable value as Postman without locking you to one client — the portable, forkable form of the same exercise.
Open, tool-agnostic API collections (OpenAPI-derived and Bruno).
API Collection
OPEN COLLECTIONAlleva Rest Advanced Form API
OPEN COLLECTIONAlleva Rest Advanced Form Data Backup API
OPEN COLLECTIONAlleva Rest Advanced Form Element API
OPEN COLLECTIONAlleva Rest Advanced Form Instance API
OPEN COLLECTIONAlleva Rest Appointments API
OPEN COLLECTIONAlleva Rest Bed API
OPEN COLLECTIONAlleva Rest Bed Occupancy API
OPEN COLLECTIONAlleva Rest Bed Reservation API
OPEN COLLECTIONAlleva Rest Client Device API
OPEN COLLECTIONAlleva Rest Clients API
OPEN COLLECTIONAlleva Rest Data Facet API
OPEN COLLECTIONAlleva Rest Data Value API
OPEN COLLECTIONAlleva Rest Discharge Plan API
OPEN COLLECTIONAlleva Rest Document API
OPEN COLLECTIONAlleva Rest Facilities API
OPEN COLLECTIONAlleva Rest Homework API
OPEN COLLECTIONAlleva Rest Incident Report API
OPEN COLLECTIONAlleva Rest Intake API
OPEN COLLECTIONAlleva Rest Level Of Care API
OPEN COLLECTIONAlleva Rest Manage Intake API
OPEN COLLECTIONAlleva Rest Master Codes API
OPEN COLLECTIONAlleva Rest Medications API
OPEN COLLECTIONAlleva Rest Organizations API
OPEN COLLECTIONAlleva Rest Pronoun API
OPEN COLLECTIONAlleva Rest Prospects API
OPEN COLLECTIONAlleva Rest Referral Companies API
OPEN COLLECTIONAlleva Rest Referral Contacts API
OPEN COLLECTIONAlleva Rest Rehab API
OPEN COLLECTIONAlleva Rest Api
OPEN COLLECTIONAlleva Rest Room API
OPEN COLLECTIONAlleva Rest Sessions API
OPEN COLLECTIONAlleva Rest Shift Rounds API
OPEN COLLECTIONAlleva Rest Snapshot API
OPEN COLLECTIONAlleva Rest Survey API
OPEN COLLECTIONAlleva Rest Treatment Plans API
OPEN COLLECTIONAlleva Rest User License API
OPEN COLLECTIONAlleva Rest Users API
OPEN COLLECTIONScroll within the panel for all 38 ·
MCP Servers 1
Model Context Protocol servers expose these APIs directly to AI agents. We profile them because agent-native access is the fastest-growing way this provider's capabilities actually get used.
Model Context Protocol servers that expose these APIs to AI agents.
alleva-mcp.yml
MCP SERVERSecurity Posture 3
Authentication, domain security, vulnerability disclosure, and trust-center signals — the evidence that a provider takes security seriously enough to document it. We profile it because you can't govern what you can't see.
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Alleva Trust Center
SOC 2 Type II, HIPAA, ONC Certification (ONC Health IT Certification Program)
SECURITYScopes 1
OAuth scopes are the vocabulary of least-privilege access. Profiling them shows exactly what an integration — or an agent acting on a user's behalf — is allowed to do.
OAuth scopes governing access to this provider's APIs.
Resources
Every other property we hold for Alleva — documentation, portals, status pages, policies, and corporate surface — grouped by the job it does, following the integrator's arc from getting started to running in production.
Documentation 2
Reference material describing how the API behaves
Agent Surfaces 4
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 4
Pagination, idempotency, versioning, errors, and events
Build 1
SDKs, sample code, and the tooling you integrate with
Access & Security 5
Authentication, authorization, and security posture
Operate 3
Status, limits, changes, and where to get help
Commercial 2
Pricing, plans, and the legal terms of use
Company 3
The organization behind the API
Other 1
Properties that don't map to a standard resource type
← All providers · Data indexed from github.com/api-evangelist/alleva · machine-readable index on apis.io
This is an independent, third-party profile of Alleva, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com
·
Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and
you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.